 
 
Tue Sep 17 05:28:31 2013
Command line: TestDisk
 
TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-07-30T14:08:52
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\.PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\.PhysicalDrive1)=250059350016
filewin32_getfilesize(\.PhysicalDrive2) GetFileSize err Unzulssige Funktion.
 
filewin32_setfilepointer(\.PhysicalDrive2) SetFilePointer err Unzulssige Funktion.
 
Warning: can't get size for \.PhysicalDrive2
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\.C:)=52323942400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\.D:)=94371840000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\.E:)=103255375872
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\.F:)=0
Warning: can't get size for \.F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\.I:)=895346371584
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\.J:)=104855502848
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10EAVS-00D7B0, S/N:2020202057202d44435755413134373735323738, FW:01.01A01
Disk /dev/sdb - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - STM3250318AS, S/N:2020202020202020202020205639374d314c444c, FW:CC38
 
Partition table type (auto): Intel
Disk /dev/sda - 1000 GB / 931 GiB - WDC WD10EAVS-00D7B0
Partition table type: Intel
 
Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
Info: size boot_sector 1748718102, partition 1748723382
NTFS at 108853/4/16
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 P HPFS - NTFS              0  1  1 108852 254 63 1748723382 [Optical]
2 P HPFS - NTFS          108853  4 16 121600 247 55  204795904 [Volume]
No partition is bootable
 
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/1/1
filesystem size          1748718102
sectors_per_cluster      8
mft_lcn                  786432
mftmirr_lcn              89599521
clusters_per_mft_record  -10
clusters_per_index_record 1
    HPFS - NTFS              0  1  1 108852 171 12 1748718102 [Optical]
    NTFS, blocksize=4096, 895 GB / 833 GiB
NTFS at 108852/226/47
filesystem size          204797952
sectors_per_cluster      8
mft_lcn                  786432
mftmirr_lcn              2
clusters_per_mft_record  -10
clusters_per_index_record 1
    HPFS - NTFS          108852 226 47 121600 247 55  204797952
    NTFS, blocksize=4096, 104 GB / 97 GiB
NTFS at 121600/254/63
filesystem size          519927660
sectors_per_cluster      8
mft_lcn                  786432
mftmirr_lcn              32495478
clusters_per_mft_record  -10
clusters_per_index_record 1
    HPFS - NTFS          89237  0  1 121600 254 63  519927660
    NTFS found using backup sector, blocksize=4096, 266 GB / 247 GiB
NTFS at 121600/254/63
filesystem size          519927660
sectors_per_cluster      8
mft_lcn                  786432
mftmirr_lcn              32495478
clusters_per_mft_record  -10
clusters_per_index_record 1
file_pread(4,4096,buffer,1959811520(121992/159/24)) lseek err Invalid argument
file_pread(4,1,buffer,1959811520(121992/159/24)) lseek err Invalid argument
NTFS: Can't read MFT
    HPFS - NTFS          121600 254 63 153964 254 62  519927660
    NTFS, blocksize=4096, 266 GB / 247 GiB
This partition ends after the disk limits. (start=1953520064, size=519927660, end=2473447723, disk end=1953525168)
file_pread(4,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(4,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(4,8,buffer,1953525205(121601/81/38)) lseek err Invalid argument
file_pread(4,1,buffer,1953525205(121601/81/38)) lseek err Invalid argument
file_pread(4,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(4,8,buffer,1953525333(121601/83/40)) lseek err Invalid argument
file_pread(4,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(4,8,buffer,1953525461(121601/85/42)) lseek err Invalid argument
file_pread(4,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(4,8,buffer,1953525589(121601/87/44)) lseek err Invalid argument
file_pread(4,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(4,8,buffer,1953525717(121601/89/46)) lseek err Invalid argument
file_pread(4,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(4,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(4,14,buffer,1953525761(121601/90/27)) lseek err Invalid argument
file_pread(4,3,buffer,1953525775(121601/90/41)) lseek err Invalid argument
file_pread(4,3,buffer,1953525822(121601/91/25)) lseek err Invalid argument
file_pread(4,8,buffer,1953525838(121601/91/41)) lseek err Invalid argument
file_pread(4,11,buffer,1953525885(121601/92/25)) lseek err Invalid argument
file_pread(4,2,buffer,1953527807(121601/122/57)) lseek err Invalid argument
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1266 GB / 1179 GiB)
The following partition can't be recovered:
    HPFS - NTFS          121600 254 63 153964 254 62  519927660
    NTFS, blocksize=4096, 266 GB / 247 GiB
get_geometry_from_list_part_aux head=255 nbr=3
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=3
 
Results
    HPFS - NTFS              0  1  1 108852 254 63 1748723382 [Optical]
    NTFS, blocksize=4096, 895 GB / 833 GiB
    HPFS - NTFS          89237  0  1 121600 254 63  519927660
    NTFS found using backup sector, blocksize=4096, 266 GB / 247 GiB
    HPFS - NTFS          108852 226 47 121600 247 55  204797952
    NTFS, blocksize=4096, 104 GB / 97 GiB
 
interface_write()
 
No partition found or selected for recovery 